CyberRota Analysis
AI-GeneratedDokploy versions prior to 0.29.13 have a vulnerability in the WebSocket handler that allows authenticated users to access an interactive terminal on the host without proper authorization checks. This could lead to unauthorized access to sensitive server functions, posing a significant risk to the integrity and confidentiality of the environment. Organizations using Dokploy should prioritize upgrading to version 0.29.13 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the WebSocket handler in apps/dokploy/server/wss/terminal.ts validates a session but does not authorize access to the requested server. An authenticated user can connect to /terminal?serverId=local, select the special serverId=local branch, and obtain an interactive terminal on the Dokploy host without an organization role or server-access check. This issue is fixed in version 0.29.13.